Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
File: 9WYBbYeCMBKLWOJ51mHBleY5lYg.mft (raw, json)
Hash identifier: HJ4rYU/vF4G7wDQocT43v3hqsoYXImi77FOLNjRJVHo=
Subject key identifier: C9:20:21:7A:1F:B4:51:E4:21:E8:DD:43:15:5F:28:3C:92:94:63:B1
Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588
Certificate serial: 0198D5836737DFBBC8B3E2B4BA20C636AED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
Manifest number: 05E3
Signing time: Sat 23 Aug 2025 06:00:15 +0000
Manifest this update: Sat 23 Aug 2025 06:00:15 +0000
Manifest next update: Sun 24 Aug 2025 06:00:15 +0000
Files and hashes: 1: 9WYBbYeCMBKLWOJ51mHBleY5lYg.crl (hash: hSagF0dybb0TlwO2FgEZj8bc9stC0sW68fg5u7cF024=)
2: FK1-eXhRSe8ffp_S_lHbaTgBt8o.roa (hash: isewhw2bUh3V4X01VwpIosa0D4eXIb8LPC/N4oNejio=)
3: d9_S0MdBcLLQhVMY4GIXLkmlz3w.roa (hash: JIdW7E8RpIHlAxf+ndeNBtGoppjXWf7rJVf8yChsf7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:67:37:df:bb:c8:b3:e2:b4:ba:20:c6:36:ae:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566016d878230128b58e279d661c195e6399588
Validity
Not Before: Aug 23 06:00:15 2025 GMT
Not After : Aug 24 06:00:15 2025 GMT
Subject: CN=c920217a1fb451e421e8dd43155f283c929463b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:a0:5c:0b:ca:c8:37:43:c8:9b:03:a2:94:
52:a2:6e:be:33:8a:56:a5:a5:21:55:34:72:9d:1c:
a8:54:d2:80:2c:a6:32:b1:4e:0f:68:af:ad:ab:af:
e3:fe:e9:78:03:5e:c1:47:82:69:c5:19:f8:12:1a:
e8:c6:9b:10:4f:73:58:6d:ed:db:d0:a5:52:4c:be:
3b:f1:99:32:72:96:89:c7:c5:57:11:c3:37:da:fa:
05:c1:6d:50:23:07:75:1f:93:c0:11:50:fc:63:8f:
0c:33:05:87:66:8c:55:7d:07:10:9e:36:ae:3f:d5:
d5:08:9a:f2:ef:c5:d3:a6:50:09:9f:cc:68:0d:28:
2b:f1:0c:1f:92:72:69:b3:a5:4f:77:28:40:ee:b5:
62:04:97:c9:ec:75:be:7e:ad:10:3d:5b:c5:ed:08:
79:5f:09:4a:c9:c4:0d:26:69:b2:2e:ed:a8:99:1a:
b3:b5:6f:85:e7:04:f0:ba:3e:25:85:60:b8:4a:3c:
f7:e7:cf:82:65:b0:3d:03:f0:9d:96:f1:9b:c6:dc:
ac:9a:55:1e:34:b7:2a:e5:5c:ac:27:29:7d:59:6a:
e8:d7:fe:bd:75:a7:25:d4:96:9a:9f:36:19:f9:e2:
30:f2:b6:84:3d:5b:1f:d0:28:47:07:90:49:f4:16:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:21:7A:1F:B4:51:E4:21:E8:DD:43:15:5F:28:3C:92:94:63:B1
X509v3 Authority Key Identifier:
keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9d:f3:94:db:d9:ad:e8:59:86:ee:b8:88:7e:56:8b:2d:5f:
10:f2:45:5c:24:58:e8:bc:30:89:b5:d9:27:fb:81:52:e5:0f:
28:70:70:14:8f:f2:eb:d9:2e:b4:fe:4d:db:58:bd:2c:df:47:
41:fe:51:42:0a:50:47:25:cc:f0:75:bc:c9:de:b6:11:91:b7:
cc:7b:f7:c3:09:bf:5d:49:74:ab:fd:2a:dd:78:2e:4e:e3:d8:
ee:ae:23:62:4e:8b:f3:4c:84:16:9e:83:68:9f:fd:b2:ee:ef:
2c:1a:ca:3e:97:96:f8:0f:3e:7c:b3:bc:60:22:4e:47:ae:41:
d7:9e:7e:a2:f0:0d:af:fd:b3:76:a0:3d:30:c7:f8:b2:0d:ae:
57:70:a5:71:74:a3:ee:e2:28:2e:30:19:e4:5a:2a:0d:b5:6f:
2f:2b:b5:86:7a:bf:4e:dd:00:50:15:f4:cc:94:5b:ea:53:ed:
29:87:98:4d:cc:3c:02:b4:19:e8:8b:cb:a7:9b:f6:1b:51:30:
d7:ac:77:bd:3e:d7:59:ab:10:8c:8b:97:1b:a0:a1:ea:14:38:
6a:ad:39:b5:66:af:7c:99:5d:47:50:5b:b9:65:a8:26:1b:15:
cb:0c:4e:67:3a:66:9e:e1:69:77:83:dc:19:f4:c8:b2:b7:9a:
fb:db:7c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2c337vIs+K0uiDGNq7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjYwMTZkODc4MjMwMTI4YjU4ZTI3OWQ2NjFjMTk1ZTYz
OTk1ODgwHhcNMjUwODIzMDYwMDE1WhcNMjUwODI0MDYwMDE1WjAzMTEwLwYDVQQD
EyhjOTIwMjE3YTFmYjQ1MWU0MjFlOGRkNDMxNTVmMjgzYzkyOTQ2M2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMegXAvKyDdDyJsDopRSom6+M4pW
paUhVTRynRyoVNKALKYysU4PaK+tq6/j/ul4A17BR4JpxRn4EhroxpsQT3NYbe3b
0KVSTL478ZkycpaJx8VXEcM32voFwW1QIwd1H5PAEVD8Y48MMwWHZoxVfQcQnjau
P9XVCJry78XTplAJn8xoDSgr8QwfknJps6VPdyhA7rViBJfJ7HW+fq0QPVvF7Qh5
XwlKycQNJmmyLu2omRqztW+F5wTwuj4lhWC4Sjz358+CZbA9A/CdlvGbxtysmlUe
NLcq5VysJyl9WWro1/69dacl1JaanzYZ+eIw8raEPVsf0ChHB5BJ9BZcKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkgIXoftFHkIejdQxVfKDySlGOxMB8GA1UdIwQY
MBaAFPVmAW2HgjASi1jiedZhwZXmOZWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wOTNhNTEtMTA3NS00MGJlLTlkYzIt
ZDE1YjA3OWMzNWZiLzEvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wOTNhNTEtMTA3NS00MGJlLTlkYzItZDE1YjA3OWMzNWZi
LzEvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA53zlNvZ
rehZhu64iH5Wiy1fEPJFXCRY6LwwibXZJ/uBUuUPKHBwFI/y69kutP5N21i9LN9H
Qf5RQgpQRyXM8HW8yd62EZG3zHv3wwm/XUl0q/0q3XguTuPY7q4jYk6L80yEFp6D
aJ/9su7vLBrKPpeW+A8+fLO8YCJOR65B155+ovANr/2zdqA9MMf4sg2uV3ClcXSj
7uIoLjAZ5FoqDbVvLyu1hnq/Tt0AUBX0zJRb6lPtKYeYTcw8ArQZ6IvLp5v2G1Ew
16x3vT7XWasQjIuXG6Ch6hQ4aq05tWavfJldR1BbuWWoJhsVywxOZzpmnuFpd4Pc
GfTIsrea+9t8Pg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:36 2025 by rpki-client